Re: Local Printers

From: Seeker (anonymous_at_discussions.microsoft.com)
Date: 03/19/04 

Date: Fri, 19 Mar 2004 15:11:47 -0500

One way to accomplish this would be to create a special user group. in our
case 'Local machine Admins' on the domain. Drop this group in the local
administrators group of every computer. Whenever user needs to make a
change that requires them to be an administrator, you can drop that user in
this domain group, and take him out when done. In this way no permanent
admin. rights would get assigned to the user.

The restriction not to add printers stems from control over device driver
installation; if you can install the most common printer drivers in your
standard image, then they can simply select an existing printer (or the
nearest match). I have not done this personally, so don't know of a clean
way to accomplish this.

"Vance" <anonymous@discussions.microsoft.com> wrote in message
news:4EA20D52-3479-4DFE-9D11-2522FCE716F0@microsoft.com...
> I run a military network so I keep the machines locked down as much as
possible. Some of the things users put on their machines can compromise
network security. eg. kaaza, stock tickers, etc.

Relevant Pages

  • Re: network freebsd computers
    ... with multiple FreeBSD machines. ... Where can I find a go How-To on how to accomplish this? ... I have Samba set up on my FreeBSD machines. ... installed on the Windows machines so I can directly access the FreeBSD ...
    (freebsd-questions)
  • Re: network freebsd computers
    ... with multiple FreeBSD machines. ... Where can I find a go How-To on how to accomplish this? ... I have Samba set up on my FreeBSD machines. ... installed on the Windows machines so I can directly access the FreeBSD ...
    (freebsd-questions)
  • Re: Blocking a group of users from logging onto a wkstn.
    ... I want to block all students from logging onto a few specific machines computers. ... The student GPO is globally the same for all sites so this would affect all the sites if modified, the same with the teacher GPO. ... You can make additional GPOs if we can find an easy way for you to accomplish the goal. ... No, "Authenticated Users" is an AUTOMATIC group like Everyone, but essentially this idea is what Cary and I were discussing for you but using Users membership on the workstations and a group, either new and existing to grant the right ONLY to them by adding them to "Users" and removing the default "Domain Users" from it. ...
    (microsoft.public.win2000.active_directory)
  • Re: Re-activate 2nd-user machine?
    ... So what does the compulsory "activation" accomplish? ... packages preinstalled on machines often have the same key? ... launched the following message into cyberspace: ...
    (microsoft.public.windowsxp.general)